ci: Use custom script to release workflows/actions independently (#144)

Author: ppawlowski

.github/release-please-config.json

@@ -0,0 +1,85 @@
+#!/usr/bin/env bash
+#
+# Decide whether the given component needs a new semver tag.
+#
+# Reads:
+#   COMPONENT     - component name (e.g. reusable-workflow-1)
+#   INCLUDE_PATH  - path filter passed to `git log -- <path>`
+#
+# Writes (when GITHUB_OUTPUT is set, i.e. running under GitHub Actions):
+#   release=true|false
+#   tag=<component>/v<new-version>   (only when release=true)
+#   version=<new-version>            (only when release=true)
+
+set -euo pipefail
+
+: "${COMPONENT:?COMPONENT must be set}"
+: "${INCLUDE_PATH:?INCLUDE_PATH must be set}"
+
+if [ ! -e "$INCLUDE_PATH" ]; then
+  echo "INCLUDE_PATH '$INCLUDE_PATH' does not exist" >&2
+  exit 1
+fi
+
+emit() {
+  if [ -n "${GITHUB_OUTPUT:-}" ]; then
+    echo "$1" >> "$GITHUB_OUTPUT"
+  fi
+}
+
+LATEST_TAG=$(git tag -l "${COMPONENT}/v[0-9]*.[0-9]*.[0-9]*" --sort=-v:refname | head -n1 || true)
+if [ -z "$LATEST_TAG" ]; then
+  CURRENT_VER="0.0.0"
+  RANGE="HEAD"
+  BUMP="minor"
+  echo "No previous tag found for ${COMPONENT}, treating as new component (initial release will be at least 0.1.0)"
+else
+  CURRENT_VER="${LATEST_TAG#"${COMPONENT}"/v}"
+  RANGE="${LATEST_TAG}..HEAD"
+  echo "Current version: ${CURRENT_VER} (from tag ${LATEST_TAG})"
+fi
+
+mapfile -t SUBJECTS < <(git log "$RANGE" --first-parent --format='%s' -- "$INCLUDE_PATH")
+echo "Found ${#SUBJECTS[@]} commits affecting ${INCLUDE_PATH} since ${LATEST_TAG:-<initial>}"
+
+BUMP="${BUMP:-}"
+for subject in "${SUBJECTS[@]}"; do
+  [ -z "$subject" ] && continue
+  echo "  - ${subject}"
+  if echo "$subject" | grep -qE '^[a-zA-Z]+(\([^)]+\))?!:'; then
+    echo "  → BREAKING CHANGE found in: ${subject}"
+    echo "  → Major bump triggered by: ${subject}"
+    BUMP="major"
+    break
+  fi
+  TYPE=$(echo "$subject" | sed -E 's/^([a-zA-Z]+).*/\1/')
+  case "$TYPE" in
+    feat)
+      if [ "$BUMP" != "minor" ]; then
+        echo "  → Minor bump triggered by: ${subject}"
+        BUMP="minor"
+      fi
+      ;;
+    fix|perf|chore|docs|refactor|revert)
+      [ -z "$BUMP" ] && BUMP="patch"
+      ;;
+  esac
+done
+
+if [ -z "$BUMP" ]; then
+  echo "No release needed for ${COMPONENT} (latest=${LATEST_TAG})"
+  emit "release=false"
+  exit 0
+fi
+
+IFS='.' read -r MAJ MIN PAT <<< "$CURRENT_VER"
+case "$BUMP" in
+  major) NEW_VER="$((MAJ+1)).0.0" ;;
+  minor) NEW_VER="${MAJ}.$((MIN+1)).0" ;;
+  patch) NEW_VER="${MAJ}.${MIN}.$((PAT+1))" ;;
+esac
+NEW_TAG="${COMPONENT}/v${NEW_VER}"
+echo "Will release ${NEW_TAG} from ${LATEST_TAG:-<initial>} (bump=${BUMP})"
+emit "release=true"
+emit "tag=${NEW_TAG}"
+emit "version=${NEW_VER}"

.github/release-please-manifest.json

@@ -0,0 +1,67 @@
+name: Release workflows/actions
+
+on:
+  push:
+    branches: [main]
+  workflow_dispatch:
+
+permissions:
+  contents: write
+
+concurrency:
+  group: release-${{ github.ref }}
+  cancel-in-progress: false
+
+jobs:
+  release:
+    name: Release ${{ matrix.component.name }}
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        component:
+          - { name: build_container_image, path: .github/workflows/build_container_image.yml }
+          - { name: build_node_package, path: .github/workflows/build_node_package.yml }
+          - { name: build_node_package_with_pgsql, path: .github/workflows/build_node_package_with_pgsql.yml }
+          - { name: deploy_container_image, path: .github/workflows/deploy_container_image.yml }
+          - { name: deploy_helm_chart, path: .github/workflows/deploy_helm_chart.yml }
+          - { name: merge_multiarch_images, path: .github/workflows/merge_multiarch_images.yml }
+          - { name: publish_node_package, path: .github/workflows/publish_node_package.yml }
+          - { name: sast_scan, path: .github/workflows/sast_scan.yaml }
+          - { name: npm_test, path: actions/npm_test }
+          - { name: scan_container_image, path: actions/scan_container_image }
+          - { name: update-nr-flows, path: actions/update-nr-flows }
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          fetch-depth: 0
+          fetch-tags: true
+
+      - name: Compute next version
+        id: compute-next-version
+        env:
+          COMPONENT: ${{ matrix.component.name }}
+          INCLUDE_PATH: ${{ matrix.component.path }}
+        run: bash .github/scripts/compute-next-version.sh
+
+      - name: Tag
+        if: steps.compute-next-version.outputs.release == 'true'
+        env:
+          TAG: ${{ steps.compute-next-version.outputs.tag }}
+          COMPONENT: ${{ matrix.component.name }}
+          VERSION: ${{ steps.compute-next-version.outputs.version }}
+        run: |
+          set -euo pipefail
+          git config user.name  'github-actions[bot]'
+          git config user.email '41898282+github-actions[bot]@users.noreply.github.com'
+
+          MAJOR="${VERSION%%.*}"
+          REST="${VERSION#*.}"
+          MINOR="${REST%%.*}"
+
+          git tag -a "$TAG" -m "$TAG"
+          git push origin "$TAG"
+
+          git tag -f "${COMPONENT}/v${MAJOR}"
+          git tag -f "${COMPONENT}/v${MAJOR}.${MINOR}"
+          git push origin -f "${COMPONENT}/v${MAJOR}" "${COMPONENT}/v${MAJOR}.${MINOR}"